Threats tagged 'ghsa-2pg3-r86j-wfjv'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	4.3	CVE-2026-2700IBM watsonx Orchestrate Cartridge for Cloud Pak for Data 4.8.4 through 4.8.5, and 5.0.0 through 5.4.2 allows Medium4.32026-11-08GCVE DatabaseCVE-2026-2700 IBM watsonx Orchestrate Cartridge for Cloud Pak for Data versions 4.8.4 through 4.8.5 and 5.0.0 through 5.4.2 contains a vulnerability that allows low-privileged users to execute administrative functions by directly invoking backend APIs. This bypasses UI-level access controls because the backend does not enforce role-based access control properly. Report on CVE-2026-2700 Vulnerability CWE-284 #ghsa-2pg3-r86j-wfjv	GCVE Database	2026-11-08

Page 1 of 1